Privacy

Who operates Work Desk

Work Desk is operated by Bitscorp. The public site is https://workdesk.bitscorp.co. The contact address is alex@bitscorp.co. We do not publish a postal address on this page.

We process account and workspace data to provide the workspace you create, and we keep basic security records so the service can run. We do not sell personal data and we do not use it for advertising.

What we store

An account stores your name, email, a password hash, your role, and your language. We do not store the password itself. A workspace stores the legal name, NIF, address, IBAN, Bizum, currency, invoice series, and tax defaults you enter.

The workspace also stores the clients, projects, time entries, invoices, proposals, contracts, expenses, and templates you add. Files live in a SQLite database on the server. A proposal signature stores the typed name, the time, and the IP address of the person who signed.

Cookies

The cookie named workdesk_session is essential. It keeps you signed in. It is httpOnly, and it lasts about 30 days. During Google sign-in, a short-lived cookie named workdesk_oauth_state holds the login attempt. There are no analytics cookies and no advertising cookies.

The notice on the site lets you accept or reject. Either choice is saved in this browser's local storage, not in another cookie, and then the notice stays hidden. Rejecting does not remove the sign-in cookie. Work Desk cannot keep a session without it. The cookie is set when you sign in.

Payments

Pro is paid with Stripe Checkout when Stripe is configured. Stripe processes the card. Work Desk does not store card numbers. We store Stripe customer and subscription identifiers so we know whether the workspace is on Pro, and the payment link on an invoice when you create one.

Stripe keeps its own records under Stripe's terms. Closing a Work Desk account does not erase those records.

Google sign-in

Google sign-in is offered only when the server has a Google client configured. If you use it, we receive the email and name Google shares for that sign-in. We do not receive your Google password. If the button is hidden, Google is not in use on this server.

Mail

The public site's mail provider writes messages to the server log. It does not deliver them to an inbox. Do not rely on Send email, or on the contact form, to reach us or your client. The contact form opens your own email app, addressed to alex@bitscorp.co. Write to that address directly if the app does not open.

How long we keep it

We keep the workspace while the account exists. When you ask us to close it, we delete the workspace data from the server database, except what we still need for a legal claim or for the security of the service. Export a ZIP before you ask, if you want your own copy.

Export, access, and deletion

You can download JSON, CSV, and ZIP from Import / Export at any time, on Free or Pro. For access, a correction, or deletion, write to alex@bitscorp.co from the account email. There is no delete button in the product.

What this product is not

Work Desk is not VeriFactu-compliant, is not Facturae-compliant, and does not submit invoices to AEAT. A typed signature is not a qualified electronic signature. The product does not file your taxes.

Changes

If this policy changes, the date at the top of the page changes with it. The current version is the one published on this site.